Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad6019c5-db98-3f76-bfae-976b40532f1f.roa
File:                     ad6019c5-db98-3f76-bfae-976b40532f1f.roa (raw, json)
Hash identifier:          6GPj351gZMgPeWNZXXwaky4vyzlC4XosqmkIs5HshCY=
Subject key identifier:   A3:E7:6A:56:95:48:86:05:2B:FC:5A:96:18:09:E4:4D:86:05:B1:77
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059B378D0422B6F6C984DE00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad6019c5-db98-3f76-bfae-976b40532f1f.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.28.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:37:8d:04:22:b6:f6:c9:84:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=ab5920de-1c1b-4482-919b-e625bf539a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cd:54:90:44:3e:b4:86:b5:eb:5a:47:b5:b5:
                    f1:d5:3c:3a:de:e5:60:3b:65:95:e2:a7:2b:ea:e6:
                    9f:82:20:8e:4d:d9:47:4c:6f:cd:65:b5:e9:36:51:
                    83:fc:54:7e:38:f4:e3:81:a4:04:f8:55:9f:5d:8d:
                    dd:e8:da:11:c3:1f:34:16:2f:45:1b:5f:d0:36:a2:
                    e4:a7:e1:36:44:ef:45:ed:ef:d5:90:ad:09:4e:05:
                    06:f9:4b:e6:23:67:fb:b0:a0:37:b3:6f:82:a7:06:
                    68:9c:e5:3b:33:44:61:7f:85:71:0c:9e:5b:49:d6:
                    3f:01:2e:f0:ec:b4:3b:ff:87:bb:86:17:3b:4e:70:
                    3c:76:f2:ee:77:4a:db:ad:03:f5:c4:bf:74:08:c4:
                    c4:0f:cf:3b:3d:a4:77:c9:d9:0b:59:c8:12:2f:2e:
                    9d:58:6b:aa:6b:fa:dd:a8:a7:0c:0d:a9:22:57:3b:
                    69:8f:ee:c2:37:9a:af:b7:e5:34:3c:3e:03:c6:68:
                    e6:4b:c6:15:3c:3d:8f:14:d4:9b:f8:6c:10:b6:0c:
                    ea:bf:7c:a6:48:ac:0f:b8:43:0b:25:2b:8b:3b:fa:
                    12:fa:02:07:e6:80:11:1d:a0:75:49:ca:ee:12:b2:
                    8a:b6:56:45:bb:ff:98:53:64:1d:59:8a:0f:50:52:
                    4b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E7:6A:56:95:48:86:05:2B:FC:5A:96:18:09:E4:4D:86:05:B1:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad6019c5-db98-3f76-bfae-976b40532f1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c3:f7:51:2a:34:a1:fd:eb:32:58:af:ec:10:3a:de:10:1d:
         69:9b:c7:5c:bd:0e:f2:79:5b:d1:fa:ab:4e:4a:59:8c:fc:58:
         16:fb:a8:45:60:b5:85:43:0c:fa:78:88:be:ce:92:a6:09:cb:
         ee:45:65:63:9f:58:16:7c:70:bb:f8:28:ec:d2:ac:9c:2b:bf:
         66:08:d1:a2:d8:21:e0:49:be:5f:1f:a2:31:56:8c:f8:fe:63:
         cf:37:46:88:cc:81:4d:8b:88:09:55:f1:08:46:d9:51:1c:26:
         12:b7:63:1e:44:d9:96:a7:2f:e7:de:50:dd:fc:1a:df:a5:2e:
         b4:37:36:88:32:3a:5f:47:fd:b6:4d:ab:dc:f5:8a:e7:f3:11:
         3e:d9:b4:59:d5:b9:a0:29:87:99:3c:bc:c4:b4:73:28:14:0b:
         0b:b1:e6:61:8a:3a:de:59:c4:0e:07:f0:72:73:68:35:34:79:
         15:fd:73:57:64:0f:a1:27:db:f3:b5:98:e9:a3:77:99:4f:3a:
         e3:0e:d2:bc:62:92:da:1e:8a:e6:f1:09:99:5c:30:7a:13:3c:
         7d:37:12:54:8f:a6:d9:79:ea:76:7e:51:90:d4:a5:14:21:f3:
         3f:2d:b5:39:69:fc:1f:9d:6d:71:81:14:13:80:5b:d5:a8:70:
         74:af:43:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:11:54 2026 by rpki-client